Unfortunately, SailfishOS is not FOSS, and FOSS must be the basis of all trust, or else you have no idea to tell what kind of software (spyware) the vendor is operating on your phone. At least Jolla is starting to open-source some traditionally proprietary components.